chore(deps): bump dependencies and CI actions

Update prettier, undici, lucide-react, react/react-dom (patch within the pinned
19.2 line) and zod-openapi to 6 (the OpenAPI output is byte-identical), plus the
docker/metadata and dependabot/fetch-metadata actions.

.github/workflows/dependabot-auto-merge.yml

@@ -34,7 +34,7 @@ jobs:
       # vouch for.
       - name: Fetch Dependabot metadata
         id: metadata
-        uses: dependabot/fetch-metadata@21025c705c08248db411dc16f3619e6b5f9ea21a # v2.5.0
+        uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 

.github/workflows/docker-publish.yml

@@ -106,7 +106,7 @@ jobs:
 
       - name: Compute image labels
         id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
         with:
           images: ${{ env.IMAGE_REF }}
           labels: |
@@ -301,7 +301,7 @@ jobs:
 
       - name: Compute image tags & labels
         id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
         with:
           images: ${{ env.IMAGE_REF }}
           tags: |

package.json

@@ -69,7 +69,7 @@
     "fflate": "^0.8.3",
     "jspdf": "^4.2.1",
     "jspdf-autotable": "^5.0.8",
-    "lucide-react": "^1.17.0",
+    "lucide-react": "^1.18.0",
     "mmdb-lib": "^3.0.2",
     "next": "16.2.6",
     "next-themes": "^0.4.6",
@@ -78,19 +78,19 @@
     "prisma": "^7.8.0",
     "qrcode": "^1.5.4",
     "radix-ui": "^1.4.3",
-    "react": "19.2.5",
-    "react-dom": "19.2.5",
+    "react": "19.2.7",
+    "react-dom": "19.2.7",
     "react-hook-form": "^7.78.0",
     "recharts": "^3.8.1",
     "rrule": "^2.8.1",
     "sax": "^1.6.0",
     "sonner": "^2.0.7",
     "tailwind-merge": "^3.6.0",
-    "undici": "^8.3.0",
+    "undici": "^8.4.1",
     "web-push": "^3.6.7",
     "yaml": "^2.8.4",
     "zod": "^4.4.3",
-    "zod-openapi": "^5.4.6",
+    "zod-openapi": "^6.0.0",
     "zxcvbn-typescript": "^5.0.1"
   },
   "devDependencies": {
@@ -113,7 +113,7 @@
     "lefthook": "^2.1.9",
     "pdf-parse": "^2.4.5",
     "pg": "^8.21.0",
-    "prettier": "^3.8.3",
+    "prettier": "^3.8.4",
     "prettier-plugin-tailwindcss": "^0.8.0",
     "shadcn": "^4.9.0",
     "tailwindcss": "^4",